Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/A3jvvZGJsi0Kah3lTymapNxgi20.roa
File: A3jvvZGJsi0Kah3lTymapNxgi20.roa (raw, json)
Hash identifier: 2Swtz9vGah9/nchWRjJI9OJr3m+Y00uDOV9s2LZxRdE=
Subject key identifier: 03:78:EF:BD:91:89:B2:2D:0A:6A:1D:E5:4F:29:9A:A4:DC:60:8B:6D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 102A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/A3jvvZGJsi0Kah3lTymapNxgi20.roa
Signing time: Wed 03 Apr 2024 01:52:44 +0000
ROA not before: Wed 03 Apr 2024 01:52:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4138 (0x102a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 3 01:52:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0378EFBD9189B22D0A6A1DE54F299AA4DC608B6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:5b:f1:72:75:b7:e6:5d:de:74:9d:93:8f:
3d:22:5f:df:1d:87:df:f8:e7:ff:b6:8d:63:99:e2:
83:0f:94:3e:24:40:ce:2d:c8:65:6e:df:3d:f8:c0:
71:11:19:1d:1f:e8:a7:17:6a:94:26:27:0c:b5:7c:
e2:00:f2:8b:a2:c8:fa:74:30:0d:20:64:4f:a3:46:
79:45:df:84:0a:ad:ab:55:91:b6:10:0a:7d:06:6b:
67:4f:a8:7b:3d:e3:97:43:06:bc:ff:9e:1c:72:db:
a4:0f:f7:c6:a9:33:29:8c:70:7f:3f:28:d5:24:8e:
28:4e:1e:78:e6:a5:c8:24:dc:1e:28:56:58:9a:89:
6c:e0:7b:fd:45:9d:11:7d:7d:60:c4:3d:4b:44:28:
23:17:41:b9:2e:38:5f:25:df:d9:1f:d2:b3:61:b4:
1a:05:84:12:18:f0:4b:cb:fd:6d:d9:e9:4d:64:c8:
db:fb:18:2e:f5:a9:ec:28:0e:97:9d:a4:87:82:58:
a8:d7:aa:bd:a8:ea:d6:57:67:a4:31:fc:1f:62:0e:
35:fe:19:b7:1b:2c:03:b7:0d:ff:57:86:6e:75:8a:
16:42:01:86:b0:8b:0e:bb:75:8b:24:b7:af:e0:d1:
f5:c0:01:68:0f:ca:f0:55:63:c2:45:9b:65:9c:f2:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:78:EF:BD:91:89:B2:2D:0A:6A:1D:E5:4F:29:9A:A4:DC:60:8B:6D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/A3jvvZGJsi0Kah3lTymapNxgi20.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:6d:f2:68:64:a0:44:60:27:7c:e0:f4:b7:62:8a:d1:e7:90:
2e:2a:d8:0b:6b:bd:14:68:38:67:1c:43:8a:14:3c:ac:48:f1:
2c:70:0e:f9:b7:63:7d:82:b2:fb:96:23:cf:b3:df:12:ce:66:
7e:f9:25:ae:38:f4:69:ec:b2:f3:b3:22:60:d8:b9:27:52:7e:
39:24:8d:06:25:cc:6f:fa:c9:7a:c5:d1:fd:61:01:4b:a3:2c:
34:86:d0:e8:43:43:21:f4:2b:5f:11:c8:cf:4b:3f:b1:77:c4:
df:db:0f:db:3c:da:ca:7c:d6:d4:68:e7:bf:5e:68:d1:42:75:
b6:77:d8:fe:7d:f4:68:15:8e:cb:40:c5:76:32:3c:42:31:f1:
42:6f:13:a3:80:73:44:37:f2:67:06:dc:54:6d:1f:1c:55:e6:
26:06:36:03:28:4a:39:c5:3d:3a:5b:c1:68:1d:d8:dd:f8:b6:
d5:e7:46:23:fb:48:53:e2:7c:b7:e2:74:bc:aa:e7:3e:91:77:
fc:29:75:53:7f:37:02:56:ad:4a:56:cf:35:5c:69:11:ee:3e:
0e:37:64:e1:63:86:d6:1a:0b:b9:d2:1d:ba:92:95:c1:09:2e:
c9:c1:b4:f0:ce:f9:45:47:50:6c:27:ee:2a:46:37:22:c6:2a:
97:f3:db:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:17:43 2025 by rpki-client